Huge fines and a ban on default passwords in new UK law

[2twenty2]

Huge fines and a ban on default passwords in new UK law
https://www.bbc.com/news/technology-59400762

 

[lochlomonder]

I can see where the UK govt. is going with this one, but sometimes you simply cannot legislate for user ignorance. I'm not using that word in a pejorative sense. Rather, when it comes to these devices, I know from long experience that people simply won't learn even the basics for securing IoT devices.

 

[TechGuy]

I think that's the problem they're trying to address. You can't trust users to change default passwords on their own, so let's not use admin/admin on everything. That seems pretty reasonable to me.

Easy-to-guess default passwords preloaded on devices are banned. All products now need unique passwords that cannot be reset to factory default.

 

[renegade600]

I don't like the part about not being able to reset to factory default. A lot of devices will be returned because the user messed up the password they are trying to set. I saw this happen years ago when I worked at Walmart. A lot of computers were returned or exchanged because the user put in a password and immediately forgot it.

 

[TechGuy]

I agree with you there. That does seem like a strange requirement.